last executing test programs: 50.928695002s ago: executing program 1 (id=1133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) 50.871646253s ago: executing program 1 (id=1135): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000814000001"], 0x50) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000540)={0x7, 0x3, 0x10, 0x0, 0xa, 0x2}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000000"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, 0x0, &(0x7f0000000180)}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 50.770840795s ago: executing program 1 (id=1141): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) lseek(r0, 0x5, 0x4) 49.944237951s ago: executing program 1 (id=1161): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001180)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 49.577457908s ago: executing program 1 (id=1166): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) 48.737028874s ago: executing program 1 (id=1189): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0x7, &(0x7f0000002740)={0x4, 0x9}, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) 48.682161225s ago: executing program 32 (id=1189): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0x7, &(0x7f0000002740)={0x4, 0x9}, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) 48.440756499s ago: executing program 3 (id=1204): r0 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}, {0x3, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0xd, 0x0, 0x23}, 0x0, 0x1, 0x80000001, 0x6, 0x2, 0x1c, 0x14, 0x8a, 0x8, 0x7f, {0x1, 0xfffffff8, 0x5b, 0x9, 0x6, 0xf}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4806}, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 48.40824276s ago: executing program 3 (id=1208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 48.39246212s ago: executing program 3 (id=1209): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) 48.253111353s ago: executing program 3 (id=1212): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001180)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 47.88203167s ago: executing program 3 (id=1226): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x80001007, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) 47.318552341s ago: executing program 3 (id=1245): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004a80)={0x20, r2, 0x105, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40006) 47.301616351s ago: executing program 33 (id=1245): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004a80)={0x20, r2, 0x105, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40006) 35.019555244s ago: executing program 0 (id=1650): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 34.134026071s ago: executing program 0 (id=1660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) inotify_init() close_range(r2, 0xffffffffffffffff, 0x0) 34.099265262s ago: executing program 0 (id=1671): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 33.979289705s ago: executing program 0 (id=1666): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 33.871502207s ago: executing program 0 (id=1672): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)) 33.569232162s ago: executing program 0 (id=1677): bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 33.520368533s ago: executing program 34 (id=1677): bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 32.487779843s ago: executing program 4 (id=1699): bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61122800000000006113480000000000bf1000000000000015000200091bfbff3d030100000000008701000257000000bc26000000000000bf67000000000000140300000ee600f06702000014000000160302000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad4301000000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x101100, 0x0) 32.314010096s ago: executing program 4 (id=1706): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 32.195720588s ago: executing program 4 (id=1708): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 31.850442495s ago: executing program 4 (id=1710): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 31.662519778s ago: executing program 4 (id=1711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 31.620472009s ago: executing program 4 (id=1712): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 31.58915488s ago: executing program 35 (id=1712): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1.531787661s ago: executing program 2 (id=2563): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.531135661s ago: executing program 8 (id=2564): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2a64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x7]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x100, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x9, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x801, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x8002, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x5, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x1, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 1.483721792s ago: executing program 8 (id=2566): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0) 1.449085062s ago: executing program 8 (id=2568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) 1.402771313s ago: executing program 8 (id=2569): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) 1.161633508s ago: executing program 2 (id=2570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xf8, &(0x7f0000000100)=""/248, 0x0, 0x2c}, 0x24) 1.161115258s ago: executing program 2 (id=2571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_args={0x48, 0x114, 0x1, {{0x80000000, 0x403fc}, {&(0x7f00000001c0)=""/227, 0xe3}, &(0x7f0000000480)=[{&(0x7f0000000380)=""/153, 0x99}], 0x1, 0x44, 0x6}}], 0x48}, 0x0) 1.110625799s ago: executing program 2 (id=2572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.03241258s ago: executing program 2 (id=2573): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x8916, 0x0) 569.611119ms ago: executing program 5 (id=2586): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 539.2672ms ago: executing program 5 (id=2587): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x0) 511.26516ms ago: executing program 8 (id=2588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 421.212962ms ago: executing program 8 (id=2589): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 420.853432ms ago: executing program 5 (id=2590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xfff2}, {}, {0x0, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 333.975134ms ago: executing program 7 (id=2592): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 333.715314ms ago: executing program 5 (id=2593): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[], 0x10) 328.503823ms ago: executing program 6 (id=2594): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 290.268455ms ago: executing program 7 (id=2595): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) 261.817675ms ago: executing program 5 (id=2596): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe8, 0x2daef}, 0x0, 0x10000, 0x0, 0x0, 0xd8b2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 261.348855ms ago: executing program 6 (id=2597): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet6(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 182.657846ms ago: executing program 6 (id=2598): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 182.094907ms ago: executing program 7 (id=2599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 162.533696ms ago: executing program 6 (id=2600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setpriority(0x2, 0xff, 0x0) 147.841257ms ago: executing program 2 (id=2601): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="02070005090000002dbd7000fedbdf250700190000"], 0x48}}, 0x4040014) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) 147.243687ms ago: executing program 7 (id=2611): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$packet(r0, &(0x7f0000001540)="028988a8", 0x4, 0x8000050, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0xfb}, 0x14) 112.967778ms ago: executing program 5 (id=2602): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r0) 49.626159ms ago: executing program 6 (id=2603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8081) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 49.311679ms ago: executing program 7 (id=2604): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xe, 0x40408d5, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 41.072059ms ago: executing program 6 (id=2605): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xa0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) mount(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x8c, 0x0) 0s ago: executing program 7 (id=2606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) unshare(0x2c020400) r1 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r1, 0x8ba, 0x696d, 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): ors = 8 limit=128 [ 72.450325][ T5897] sch_tbf: burst 2976 is lower than device lo mtu (11337746) ! [ 72.485715][ T5902] atomic_op ffff88811a5bd928 conn xmit_atomic 0000000000000000 [ 72.536541][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 72.536554][ T29] audit: type=1326 audit(1759367594.871:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.0.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90406eeec9 code=0x7ffc0000 [ 72.605113][ T29] audit: type=1326 audit(1759367594.871:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.0.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90406eeec9 code=0x7ffc0000 [ 72.628715][ T29] audit: type=1326 audit(1759367594.871:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.0.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90406eeec9 code=0x7ffc0000 [ 72.652070][ T29] audit: type=1326 audit(1759367594.871:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.0.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90406eeec9 code=0x7ffc0000 [ 72.676007][ T29] audit: type=1326 audit(1759367594.871:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.0.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90406eeec9 code=0x7ffc0000 [ 72.699433][ T29] audit: type=1326 audit(1759367594.871:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.0.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90406eeec9 code=0x7ffc0000 [ 72.722759][ T29] audit: type=1326 audit(1759367594.871:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.0.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90406eeec9 code=0x7ffc0000 [ 72.746421][ T29] audit: type=1326 audit(1759367594.871:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.0.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90406eeec9 code=0x7ffc0000 [ 72.770049][ T29] audit: type=1326 audit(1759367594.871:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.0.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90406eeec9 code=0x7ffc0000 [ 72.793592][ T29] audit: type=1326 audit(1759367594.911:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.0.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90406eeec9 code=0x7ffc0000 [ 73.211821][ T5994] gtp0: entered promiscuous mode [ 73.394170][ T6018] bridge0: entered promiscuous mode [ 73.401304][ T6018] macvtap1: entered allmulticast mode [ 73.406786][ T6018] bridge0: entered allmulticast mode [ 73.443480][ T6018] bridge0: port 3(macvtap1) entered blocking state [ 73.450327][ T6018] bridge0: port 3(macvtap1) entered disabled state [ 73.459153][ T6018] bridge0: left allmulticast mode [ 73.464747][ T6018] bridge0: left promiscuous mode [ 73.692302][ T6056] netlink: zone id is out of range [ 73.696209][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1018'. [ 73.697573][ T6056] netlink: zone id is out of range [ 73.731566][ T6057] erspan0: entered promiscuous mode [ 73.736903][ T6057] macvtap1: entered promiscuous mode [ 73.742429][ T6057] macvtap1: entered allmulticast mode [ 73.747831][ T6057] erspan0: entered allmulticast mode [ 73.778470][ T6057] erspan0: left allmulticast mode [ 73.783706][ T6057] erspan0: left promiscuous mode [ 73.798585][ T6061] loop0: detected capacity change from 0 to 128 [ 74.046432][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'. [ 74.082976][ T6088] team0 (unregistering): Port device team_slave_0 removed [ 74.100351][ T6088] team0 (unregistering): Port device team_slave_1 removed [ 74.118049][ T6088] team0 (unregistering): Port device dummy0 removed [ 74.126810][ T6092] netlink: 'syz.0.1033': attribute type 1 has an invalid length. [ 74.157112][ T6092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.396471][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 74.406670][ T6113] netlink: 121 bytes leftover after parsing attributes in process `syz.0.1043'. [ 74.461389][ T6119] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.788350][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 74.807246][ T2108] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.819332][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 74.829297][ T2108] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.839515][ T2108] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.859077][ T2108] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.917975][ T6160] loop0: detected capacity change from 0 to 512 [ 74.947048][ T6160] EXT4-fs warning (device loop0): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.971503][ T6160] EXT4-fs (loop0): mount failed [ 74.990912][ T6160] loop0: detected capacity change from 0 to 512 [ 75.009444][ T6160] EXT4-fs: Ignoring removed nobh option [ 75.048292][ T6160] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1064: corrupted inode contents [ 75.070464][ T6160] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.1064: mark_inode_dirty error [ 75.086525][ T6160] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1064: corrupted inode contents [ 75.099359][ T6160] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1064: mark_inode_dirty error [ 75.112194][ T6160] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.1064: Failed to acquire dquot type 0 [ 75.133426][ T6160] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1064: corrupted inode contents [ 75.148981][ T6160] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.1064: mark_inode_dirty error [ 75.163726][ T6160] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1064: corrupted inode contents [ 75.177517][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'. [ 75.188367][ T6160] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1064: mark_inode_dirty error [ 75.200915][ T6160] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1064: corrupted inode contents [ 75.214400][ T6183] IPVS: Error joining to the multicast group [ 75.226166][ T6160] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 75.237512][ T6160] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1064: corrupted inode contents [ 75.257778][ T6160] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.1064: mark_inode_dirty error [ 75.275866][ T6160] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 75.293525][ T6160] EXT4-fs (loop0): 1 truncate cleaned up [ 75.312863][ T6160] EXT4-fs mount: 2 callbacks suppressed [ 75.312882][ T6160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.373609][ T6160] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.388415][ T6199] loop2: detected capacity change from 0 to 128 [ 75.398546][ T6201] netlink: 'syz.1.1081': attribute type 10 has an invalid length. [ 75.407975][ T6201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1081'. [ 75.428527][ T6199] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 75.458506][ T6201] batman_adv: batadv0: Adding interface: veth1_vlan [ 75.465173][ T6201] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.493926][ T6199] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 75.494091][ T6201] batman_adv: batadv0: Interface activated: veth1_vlan [ 75.502146][ T6199] FAT-fs (loop2): Filesystem has been set read-only [ 75.518190][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.618027][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1089'. [ 75.640776][ T6222] loop2: detected capacity change from 0 to 128 [ 75.646969][ T6223] bridge0: entered promiscuous mode [ 75.657271][ T6223] bridge0: port 3(macvlan2) entered blocking state [ 75.664111][ T6223] bridge0: port 3(macvlan2) entered disabled state [ 75.673584][ T6223] macvlan2: entered allmulticast mode [ 75.679005][ T6223] bridge0: entered allmulticast mode [ 75.705204][ T6222] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 75.718000][ T6223] macvlan2: left allmulticast mode [ 75.723254][ T6223] bridge0: left allmulticast mode [ 75.732515][ T6223] bridge0: left promiscuous mode [ 75.745268][ T6222] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.824807][ T6234] loop4: detected capacity change from 0 to 512 [ 75.848481][ T6234] EXT4-fs warning (device loop4): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.865319][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.892424][ T6234] EXT4-fs (loop4): mount failed [ 75.920452][ T6242] vlan2: entered allmulticast mode [ 75.931843][ T6234] loop4: detected capacity change from 0 to 512 [ 75.939738][ T6234] EXT4-fs: Ignoring removed nobh option [ 75.964039][ T6234] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1096: corrupted inode contents [ 75.977560][ T6234] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1096: mark_inode_dirty error [ 75.991239][ T6234] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1096: corrupted inode contents [ 76.004597][ T6234] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1096: mark_inode_dirty error [ 76.016519][ T6234] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.1096: Failed to acquire dquot type 0 [ 76.037096][ T6234] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1096: corrupted inode contents [ 76.058638][ T6234] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1096: mark_inode_dirty error [ 76.075232][ T6234] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1096: corrupted inode contents [ 76.091527][ T6234] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1096: mark_inode_dirty error [ 76.112325][ T6234] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1096: corrupted inode contents [ 76.127510][ T6234] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 76.137862][ T6234] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1096: corrupted inode contents [ 76.150370][ T6234] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1096: mark_inode_dirty error [ 76.155508][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'. [ 76.173476][ T6234] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 76.189709][ T6234] EXT4-fs (loop4): 1 truncate cleaned up [ 76.196412][ T6234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.217807][ T6260] loop2: detected capacity change from 0 to 512 [ 76.224381][ T6234] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.232664][ T6262] bridge_slave_1: left allmulticast mode [ 76.240815][ T6262] bridge_slave_1: left promiscuous mode [ 76.243950][ T6260] journal_path: Lookup failure for './file0/../file0' [ 76.247047][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.254187][ T6260] EXT4-fs: error: could not find journal device path [ 76.271677][ T6262] bridge_slave_0: left allmulticast mode [ 76.277570][ T6262] bridge_slave_0: left promiscuous mode [ 76.283477][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.302589][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.369398][ T6273] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6273 comm=syz.2.1112 [ 76.382641][ T6273] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6273 comm=syz.2.1112 [ 76.855487][ T6311] loop2: detected capacity change from 0 to 512 [ 76.883870][ T6311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.919887][ T6311] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.935390][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.944274][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.119058][ T6331] loop3: detected capacity change from 0 to 1024 [ 77.136884][ T6331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.248220][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.286913][ T6341] loop1: detected capacity change from 0 to 4096 [ 77.322766][ T6341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.352887][ T6341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.487846][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.644115][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 77.644132][ T29] audit: type=1400 audit(1759367599.981:1792): avc: denied { write } for pid=6370 comm="syz.3.1154" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.953076][ T6390] loop2: detected capacity change from 0 to 512 [ 78.008705][ T6395] loop4: detected capacity change from 0 to 512 [ 78.018426][ T6390] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 78.041157][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.048193][ T6390] EXT4-fs warning (device loop2): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.080057][ T6390] EXT4-fs (loop2): mount failed [ 78.101873][ T6395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.107763][ T6401] loop1: detected capacity change from 0 to 1024 [ 78.134382][ T6395] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.147044][ T29] audit: type=1400 audit(1759367600.481:1793): avc: denied { create } for pid=6402 comm="syz.3.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.166916][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.173182][ T6401] EXT4-fs: Ignoring removed orlov option [ 78.193349][ T6390] loop2: detected capacity change from 0 to 512 [ 78.200395][ T6401] EXT4-fs: Ignoring removed nobh option [ 78.206084][ T6401] EXT4-fs: Ignoring removed bh option [ 78.207606][ T6390] EXT4-fs: Ignoring removed nobh option [ 78.224098][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.243516][ T29] audit: type=1400 audit(1759367600.521:1794): avc: denied { write } for pid=6402 comm="syz.3.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.285116][ T6401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.304796][ T6390] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1159: corrupted inode contents [ 78.324778][ T6407] loop0: detected capacity change from 0 to 8192 [ 78.331220][ T6401] loop1: detected capacity change from 1024 to 64 [ 78.338063][ T29] audit: type=1400 audit(1759367600.661:1795): avc: denied { mounton } for pid=6398 comm="syz.1.1161" path="/216/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.402039][ T6390] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1159: mark_inode_dirty error [ 78.414726][ T3311] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 78.440775][ T29] audit: type=1400 audit(1759367600.711:1796): avc: denied { setattr } for pid=6398 comm="syz.1.1161" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.463287][ T29] audit: type=1400 audit(1759367600.751:1797): avc: denied { remove_name } for pid=3311 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.471889][ T6390] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1159: corrupted inode contents [ 78.486579][ T29] audit: type=1400 audit(1759367600.751:1798): avc: denied { rmdir } for pid=3311 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.488284][ T3311] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 78.506368][ T6390] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1159: mark_inode_dirty error [ 78.549339][ T3311] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 78.576396][ T3311] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 78.591466][ T3311] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 78.605093][ T3311] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 78.619570][ T3311] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 78.633955][ T3311] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 78.651463][ T6390] Quota error (device loop2): write_blk: dquota write failed [ 78.654910][ T3311] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 78.679245][ T3311] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 78.724319][ T6390] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 78.747724][ T6429] vlan2: entered allmulticast mode [ 78.752943][ T6429] bridge_slave_0: entered allmulticast mode [ 78.759418][ T6390] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.1159: Failed to acquire dquot type 0 [ 78.772087][ T6390] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1159: corrupted inode contents [ 78.784432][ T6390] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1159: mark_inode_dirty error [ 78.796237][ T6390] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1159: corrupted inode contents [ 78.808744][ T6390] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1159: mark_inode_dirty error [ 78.813195][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.821869][ T6390] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1159: corrupted inode contents [ 78.845299][ T6390] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 78.873097][ T6390] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1159: corrupted inode contents [ 78.886185][ T6435] __nla_validate_parse: 3 callbacks suppressed [ 78.886201][ T6435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1177'. [ 78.891562][ T6390] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1159: mark_inode_dirty error [ 78.913849][ T6390] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 78.924454][ T6390] EXT4-fs (loop2): 1 truncate cleaned up [ 78.934318][ T6390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.937763][ T6439] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1178'. [ 78.950148][ T6390] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.976316][ T6440] syzkaller0: entered allmulticast mode [ 79.046970][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.144662][ T6459] syz.4.1186 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.156906][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.172505][ T6410] bio_check_eod: 103 callbacks suppressed [ 79.172521][ T6410] kmmpd-loop1: attempt to access beyond end of device [ 79.172521][ T6410] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 79.191935][ T6410] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 79.467568][ T6497] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1201'. [ 79.574592][ T6512] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.616241][ T6475] chnl_net:caif_netlink_parms(): no params data found [ 79.689173][ T6522] loop3: detected capacity change from 0 to 1024 [ 79.727661][ T6522] EXT4-fs: Ignoring removed orlov option [ 79.739048][ T6522] EXT4-fs: Ignoring removed nobh option [ 79.744917][ T6522] EXT4-fs: Ignoring removed bh option [ 79.779720][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.786917][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.813181][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1218'. [ 79.824176][ T6475] bridge_slave_0: entered allmulticast mode [ 79.831585][ T6475] bridge_slave_0: entered promiscuous mode [ 79.840901][ T6522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.842592][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.861396][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.868945][ T6475] bridge_slave_1: entered allmulticast mode [ 79.876224][ T6475] bridge_slave_1: entered promiscuous mode [ 79.939363][ T6553] loop0: detected capacity change from 0 to 1024 [ 79.948414][ T6553] EXT4-fs: Ignoring removed orlov option [ 79.954873][ T6522] loop3: detected capacity change from 1024 to 64 [ 79.977464][ T3308] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 79.991151][ T3308] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 80.005353][ T6553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.007260][ T3308] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 80.018201][ T6558] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 80.032840][ T3308] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 80.054873][ T3308] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 80.055427][ T6475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.080019][ T3308] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 80.085603][ T6475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.132672][ T6475] team0: Port device team_slave_0 added [ 80.146220][ T6475] team0: Port device team_slave_1 added [ 80.152451][ T3308] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 80.181334][ T3308] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 80.197763][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.202163][ T3308] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 80.205007][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.244244][ T6475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.256272][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.258182][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.272248][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.298254][ T6475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.305489][ T3308] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 80.348488][ T6475] hsr_slave_0: entered promiscuous mode [ 80.358318][ T6475] hsr_slave_1: entered promiscuous mode [ 80.364541][ T6475] debugfs: 'hsr0' already exists in 'hsr' [ 80.370444][ T6475] Cannot create hsr debugfs directory [ 80.410551][ T6576] 9p: Unknown access argument : -22 [ 80.428058][ T6570] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 80.514142][ T6475] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.532034][ T6475] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.553120][ T6475] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.568639][ T6475] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.581630][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.605735][ T6538] kmmpd-loop3: attempt to access beyond end of device [ 80.605735][ T6538] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 80.619509][ T6538] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 80.713988][ T6475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.756887][ T6475] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.796286][ T3946] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.803409][ T3946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.836788][ T3946] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.843994][ T3946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.987100][ T6475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.055364][ T6611] chnl_net:caif_netlink_parms(): no params data found [ 81.110600][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.117964][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.125597][ T6611] bridge_slave_0: entered allmulticast mode [ 81.132022][ T6611] bridge_slave_0: entered promiscuous mode [ 81.139210][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.146394][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.153750][ T6611] bridge_slave_1: entered allmulticast mode [ 81.160130][ T6611] bridge_slave_1: entered promiscuous mode [ 81.180107][ T6611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.190864][ T6611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.219783][ T6611] team0: Port device team_slave_0 added [ 81.227006][ T6611] team0: Port device team_slave_1 added [ 81.246165][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.253260][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.279309][ T6611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.291188][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.298526][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.327088][ T6611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.363940][ T6611] hsr_slave_0: entered promiscuous mode [ 81.370772][ T6611] hsr_slave_1: entered promiscuous mode [ 81.377413][ T6611] debugfs: 'hsr0' already exists in 'hsr' [ 81.386087][ T6611] Cannot create hsr debugfs directory [ 81.405749][ T6475] veth0_vlan: entered promiscuous mode [ 81.424183][ T6475] veth1_vlan: entered promiscuous mode [ 81.468763][ T6475] veth0_macvtap: entered promiscuous mode [ 81.478586][ T6475] veth1_macvtap: entered promiscuous mode [ 81.488866][ T6611] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 81.498266][ T6611] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 81.508849][ T6611] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 81.517795][ T6611] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 81.528469][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.542087][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.555069][ T4004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.565343][ T4004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.574833][ T4004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.592224][ T4004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.632401][ T6611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.643683][ T6611] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.658999][ T3991] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.666091][ T3991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.676908][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1193'. [ 81.696575][ T6611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.704780][ T6666] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1193'. [ 81.707236][ T6611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.712011][ T3991] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.716801][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1193'. [ 81.728278][ T3991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.818248][ T6675] loop5: detected capacity change from 0 to 512 [ 81.876639][ T6611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.886239][ T6675] EXT4-fs warning (device loop5): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.917932][ T6675] EXT4-fs (loop5): mount failed [ 82.092422][ T6711] netlink: 'syz.2.1270': attribute type 3 has an invalid length. [ 82.162547][ T6611] veth0_vlan: entered promiscuous mode [ 82.208780][ T6611] veth1_vlan: entered promiscuous mode [ 82.240570][ T6611] veth0_macvtap: entered promiscuous mode [ 82.250142][ T6611] veth1_macvtap: entered promiscuous mode [ 82.262414][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.274732][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.286340][ T3946] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.296076][ T3946] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.318889][ T3947] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.356727][ T3947] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.364875][ T6744] netlink: 'syz.5.1283': attribute type 1 has an invalid length. [ 82.373471][ T6744] netlink: 'syz.5.1283': attribute type 2 has an invalid length. [ 82.385733][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1283'. [ 82.477279][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1287'. [ 82.548129][ T6758] loop4: detected capacity change from 0 to 8192 [ 82.677466][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 82.677550][ T29] audit: type=1326 audit(1759367605.011:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 82.756736][ T6783] loop5: detected capacity change from 0 to 512 [ 82.760751][ T29] audit: type=1326 audit(1759367605.051:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 82.787450][ T29] audit: type=1326 audit(1759367605.051:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 82.812306][ T29] audit: type=1326 audit(1759367605.051:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 82.837366][ T29] audit: type=1326 audit(1759367605.051:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 82.862339][ T29] audit: type=1326 audit(1759367605.051:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 82.885860][ T29] audit: type=1326 audit(1759367605.051:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 82.909614][ T29] audit: type=1326 audit(1759367605.051:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 82.933331][ T29] audit: type=1326 audit(1759367605.061:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 82.956847][ T29] audit: type=1326 audit(1759367605.061:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 82.971509][ T6783] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.1300: invalid block [ 83.019736][ T6791] loop2: detected capacity change from 0 to 128 [ 83.040770][ T6783] EXT4-fs (loop5): Remounting filesystem read-only [ 83.054810][ T6791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 83.073021][ T6783] EXT4-fs (loop5): 1 truncate cleaned up [ 83.091037][ T6791] System zones: 1-3, 19-19, 35-36 [ 83.091595][ T6783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.096777][ T6791] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 83.121307][ T6791] ext4 filesystem being mounted at /277/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.243020][ T6803] lo: entered allmulticast mode [ 83.254114][ T6475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.264181][ T6803] lo: left allmulticast mode [ 83.383987][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.430942][ T6807] loop6: detected capacity change from 0 to 8192 [ 83.490507][ T6822] netlink: 'syz.6.1317': attribute type 4 has an invalid length. [ 83.748871][ T6847] pim6reg: entered allmulticast mode [ 83.760340][ T6847] pim6reg: left allmulticast mode [ 83.962073][ T6863] __nla_validate_parse: 5 callbacks suppressed [ 83.962087][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 83.977437][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 83.998870][ T6870] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6870 comm=syz.5.1338 [ 84.011528][ T6870] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6870 comm=syz.5.1338 [ 84.278540][ T6902] all: renamed from lo [ 84.597974][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1375'. [ 84.674157][ T6952] vlan0: entered allmulticast mode [ 84.685218][ T6961] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 84.914194][ T6978] ip6gretap1: entered allmulticast mode [ 84.938680][ T6980] serio: Serial port ptm0 [ 85.003669][ T6982] loop2: detected capacity change from 0 to 1024 [ 85.013888][ T6982] EXT4-fs: Ignoring removed orlov option [ 85.058018][ T6982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.112436][ T6998] loop4: detected capacity change from 0 to 128 [ 85.120222][ T6998] EXT4-fs: test_dummy_encryption option not supported [ 85.155146][ T7000] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1398'. [ 85.242672][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.403370][ T7015] loop5: detected capacity change from 0 to 128 [ 85.483413][ T7015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 85.510766][ T7015] System zones: 1-3, 19-19, 35-36 [ 85.531485][ T7015] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 85.558198][ T7015] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.647738][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1408'. [ 85.658854][ T7023] batadv0: entered promiscuous mode [ 85.672026][ T7023] macvtap1: entered promiscuous mode [ 85.684251][ T7023] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 85.703578][ T7023] batadv0: left promiscuous mode [ 85.716751][ T7026] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.782979][ T6475] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.802844][ T7026] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.834460][ T7034] loop5: detected capacity change from 0 to 1024 [ 85.846363][ T7034] EXT4-fs: Ignoring removed orlov option [ 85.863968][ T7026] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.891730][ T7034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.964220][ T7040] loop6: detected capacity change from 0 to 4096 [ 85.965695][ T6475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.983520][ T7040] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 86.008750][ T7026] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.042448][ T7040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.186439][ T3946] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.195284][ T3946] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.195538][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.204606][ T3946] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.221558][ T3991] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.316921][ T7055] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1421'. [ 86.326038][ T7055] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1421'. [ 86.354928][ T7050] SELinux: policydb version 1856 does not match my version range 15-35 [ 86.398508][ T7050] SELinux: failed to load policy [ 86.419618][ T7055] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1421'. [ 86.428771][ T7055] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1421'. [ 86.545384][ T7055] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1421'. [ 86.712793][ T7088] loop5: detected capacity change from 0 to 2048 [ 86.734078][ T7088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.784194][ T6475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.177814][ T7124] bridge0: entered promiscuous mode [ 87.185797][ T7124] macvtap1: entered allmulticast mode [ 87.191329][ T7124] bridge0: entered allmulticast mode [ 87.199380][ T7124] bridge0: left allmulticast mode [ 87.204595][ T7124] bridge0: left promiscuous mode [ 87.616099][ T7184] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.663851][ T7184] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.718067][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 87.718082][ T29] audit: type=1400 audit(1759367610.051:2167): avc: denied { bind } for pid=7199 comm="syz.5.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.745726][ T29] audit: type=1400 audit(1759367610.051:2168): avc: denied { connect } for pid=7199 comm="syz.5.1485" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.748440][ T7184] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.832563][ T7184] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.866330][ T29] audit: type=1400 audit(1759367610.201:2169): avc: denied { read write } for pid=7209 comm="syz.5.1489" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.896380][ T29] audit: type=1400 audit(1759367610.201:2170): avc: denied { open } for pid=7209 comm="syz.5.1489" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.924470][ T29] audit: type=1400 audit(1759367610.201:2171): avc: denied { ioctl } for pid=7209 comm="syz.5.1489" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.960374][ T29] audit: type=1326 audit(1759367610.291:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7212 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 87.985525][ T29] audit: type=1326 audit(1759367610.291:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7212 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 87.987552][ T3947] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.009121][ T29] audit: type=1326 audit(1759367610.291:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7212 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 88.009146][ T29] audit: type=1326 audit(1759367610.291:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7212 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 88.022356][ T3947] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.042765][ T29] audit: type=1326 audit(1759367610.291:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7212 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 88.068507][ T3947] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.132941][ T2990] udevd[2990]: worker [4858] terminated by signal 33 (Unknown signal 33) [ 88.141812][ T2990] udevd[2990]: worker [4858] failed while handling '/devices/virtual/block/loop5' [ 88.155770][ T3947] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.271917][ T7234] loop0: detected capacity change from 0 to 512 [ 88.294456][ T7234] EXT4-fs: Ignoring removed nobh option [ 88.318506][ T7234] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1500: iget: bad i_size value: 38620345925642 [ 88.348530][ T7234] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1500: couldn't read orphan inode 15 (err -117) [ 88.363347][ T7234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.405326][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.581729][ T7272] Unsupported xt match [ 88.581743][ T7272] unable to load match [ 88.619211][ T7276] bond1: entered promiscuous mode [ 88.624528][ T7276] bond1: entered allmulticast mode [ 88.639478][ T7276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.649856][ T7276] bond1 (unregistering): Released all slaves [ 89.040717][ T7316] atomic_op ffff88811ec51d28 conn xmit_atomic 0000000000000000 [ 89.046204][ T7349] netlink: 'syz.6.1530': attribute type 29 has an invalid length. [ 89.061302][ T7349] netlink: 'syz.6.1530': attribute type 29 has an invalid length. [ 89.070021][ T7349] __nla_validate_parse: 19 callbacks suppressed [ 89.070036][ T7349] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1530'. [ 89.085793][ T7349] unsupported nla_type 58 [ 89.173736][ T7363] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.225200][ T7363] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.274080][ T7363] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.324078][ T7363] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.382151][ T3946] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.399168][ T3946] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.420054][ T3946] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.440728][ T3946] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.182307][ T7475] random: crng reseeded on system resumption [ 90.338189][ T7482] netlink: 272 bytes leftover after parsing attributes in process `syz.6.1554'. [ 90.435826][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1559'. [ 90.469444][ T7496] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1560'. [ 90.594391][ T7502] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.663034][ T7502] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.763906][ T7502] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.834164][ T7516] netlink: 'syz.6.1567': attribute type 4 has an invalid length. [ 90.842328][ T7516] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1567'. [ 90.872501][ T7502] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.160113][ T7549] netlink: 'syz.5.1584': attribute type 29 has an invalid length. [ 91.212512][ T7553] netlink: 'syz.5.1584': attribute type 29 has an invalid length. [ 91.234791][ T7549] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1584'. [ 91.350347][ T7563] loop6: detected capacity change from 0 to 512 [ 91.379836][ T7563] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 91.430160][ T7563] EXT4-fs (loop6): 1 truncate cleaned up [ 91.451824][ T7563] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.514324][ T7575] loop4: detected capacity change from 0 to 1024 [ 91.542688][ T7575] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 91.554768][ T7575] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 91.627218][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.638771][ T7575] JBD2: no valid journal superblock found [ 91.645281][ T7575] EXT4-fs (loop4): Could not load journal inode [ 91.677549][ T41] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.724253][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 91.760050][ T3990] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.806147][ T3949] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.845279][ T3949] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.887622][ T7592] loop6: detected capacity change from 0 to 512 [ 91.899411][ T7589] random: crng reseeded on system resumption [ 91.926529][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1607'. [ 91.937832][ T7594] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1607'. [ 91.993535][ T7605] netlink: 'syz.5.1606': attribute type 4 has an invalid length. [ 92.003791][ T7592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.043223][ T7592] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.046982][ T7605] netlink: 'syz.5.1606': attribute type 4 has an invalid length. [ 92.102865][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.303290][ T7628] random: crng reseeded on system resumption [ 92.305287][ T7630] loop0: detected capacity change from 0 to 1024 [ 92.316406][ T7630] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 92.327338][ T7630] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 92.338769][ T7630] JBD2: no valid journal superblock found [ 92.344643][ T7630] EXT4-fs (loop0): Could not load journal inode [ 92.355843][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'. [ 92.434700][ T7636] loop0: detected capacity change from 0 to 512 [ 92.464187][ T7636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.476964][ T7636] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.546038][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.660936][ T7654] loop0: detected capacity change from 0 to 764 [ 92.684839][ T7654] rock: directory entry would overflow storage [ 92.691083][ T7654] rock: sig=0x4f50, size=4, remaining=3 [ 92.696654][ T7654] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 92.713114][ T7657] loop4: detected capacity change from 0 to 128 [ 92.731102][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 92.731115][ T29] audit: type=1400 audit(1759367615.061:2257): avc: denied { setopt } for pid=7658 comm="syz.6.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.758643][ T7657] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.772962][ T7657] ext4 filesystem being mounted at /340/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.824446][ T7664] ipip0: entered promiscuous mode [ 92.842434][ T29] audit: type=1400 audit(1759367615.161:2258): avc: denied { setattr } for pid=7643 comm="syz.4.1627" path="/340/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.887970][ T29] audit: type=1400 audit(1759367615.171:2259): avc: denied { ioctl } for pid=7643 comm="syz.4.1627" path="/340/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.985938][ T29] audit: type=1400 audit(1759367615.311:2260): avc: denied { read write } for pid=6611 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.010442][ T29] audit: type=1400 audit(1759367615.311:2261): avc: denied { open } for pid=6611 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.034902][ T29] audit: type=1400 audit(1759367615.311:2262): avc: denied { ioctl } for pid=6611 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.064263][ T29] audit: type=1400 audit(1759367615.321:2263): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 93.084186][ T29] audit: type=1400 audit(1759367615.351:2264): avc: denied { map_create } for pid=7677 comm="syz.6.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.104827][ T29] audit: type=1400 audit(1759367615.351:2265): avc: denied { bpf } for pid=7677 comm="syz.6.1642" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.125592][ T29] audit: type=1400 audit(1759367615.351:2266): avc: denied { map_read map_write } for pid=7677 comm="syz.6.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.148727][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.272415][ T7690] netlink: 'syz.4.1646': attribute type 1 has an invalid length. [ 93.298474][ T7690] bond1: (slave geneve3): making interface the new active one [ 93.308198][ T7690] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 93.317132][ T3986] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.327231][ T3986] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.335684][ T3986] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.344475][ T3986] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.385140][ T7696] loop4: detected capacity change from 0 to 764 [ 93.408851][ T7696] rock: directory entry would overflow storage [ 93.415538][ T7696] rock: sig=0x4f50, size=4, remaining=3 [ 93.421144][ T7696] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 93.766063][ T7717] loop5: detected capacity change from 0 to 512 [ 93.775452][ T7717] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 93.796065][ T7717] EXT4-fs (loop5): 1 truncate cleaned up [ 93.809722][ T7717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.862033][ T6475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.893804][ T7727] netlink: 'syz.0.1671': attribute type 1 has an invalid length. [ 93.938758][ T7727] bond2: (slave geneve2): making interface the new active one [ 93.952321][ T7727] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 93.961682][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.970461][ T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.984806][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.994991][ T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 94.005300][ T7740] loop0: detected capacity change from 0 to 128 [ 94.023771][ T7740] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.063478][ T7740] ext4 filesystem being mounted at /346/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.099888][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.149909][ T7753] loop5: detected capacity change from 0 to 764 [ 94.161768][ T7753] rock: directory entry would overflow storage [ 94.168242][ T7753] rock: sig=0x4f50, size=4, remaining=3 [ 94.173905][ T7753] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 94.208484][ T7756] loop5: detected capacity change from 0 to 512 [ 94.218151][ T7756] EXT4-fs (loop5): orphan cleanup on readonly fs [ 94.226175][ T7756] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1675: bad orphan inode 13 [ 94.239059][ T7756] ext4_test_bit(bit=12, block=18) = 1 [ 94.244676][ T7756] is_bad_inode(inode)=0 [ 94.249210][ T7756] NEXT_ORPHAN(inode)=2130706432 [ 94.254525][ T7756] max_ino=32 [ 94.257737][ T7756] i_nlink=1 [ 94.261834][ T7756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.277877][ T7756] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 94.293967][ T7756] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 94.351470][ T3988] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.361512][ T3988] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 94.386364][ T6475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.415074][ T7763] atomic_op ffff88811aafe528 conn xmit_atomic 0000000000000000 [ 94.430616][ T7761] loop4: detected capacity change from 0 to 2048 [ 94.465398][ T3988] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.475362][ T3988] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 94.526949][ T7761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.592915][ T3988] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.603228][ T3988] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 94.732727][ T3988] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.742719][ T3988] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 94.915662][ T7797] __nla_validate_parse: 1 callbacks suppressed [ 94.915677][ T7797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1689'. [ 94.932403][ T7797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1689'. [ 94.943079][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.084314][ T3988] bond2 (unregistering): (slave geneve2): Releasing active interface [ 95.144022][ T3988]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.153977][ T3988]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.173251][ T3988]  (unregistering): Released all slaves [ 95.182880][ T3988] bond0 (unregistering): (slave macvlan0): Releasing active interface [ 95.201914][ T3988] bond0 (unregistering): Released all slaves [ 95.210659][ T3988] bond1 (unregistering): Released all slaves [ 95.220150][ T7813] netlink: 'syz.2.1695': attribute type 1 has an invalid length. [ 95.222164][ T3988] bond2 (unregistering): Released all slaves [ 95.255222][ T7808] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.280939][ T3988] hsr_slave_0: left promiscuous mode [ 95.286906][ T3988] hsr_slave_1: left promiscuous mode [ 95.295706][ T3988] veth1_macvtap: left promiscuous mode [ 95.301371][ T3988] veth0_macvtap: left promiscuous mode [ 95.306993][ T3988] veth1_vlan: left promiscuous mode [ 95.312849][ T3988] veth0_vlan: left promiscuous mode [ 95.424240][ T3988] team0 (unregistering): Port device team_slave_1 removed [ 95.446189][ T3988] team0 (unregistering): Port device team_slave_0 removed [ 95.496204][ T7815] bond1: (slave geneve2): making interface the new active one [ 95.509206][ T7827] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.512517][ T7815] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 95.544038][ T7808] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.559391][ T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.588080][ T7775] chnl_net:caif_netlink_parms(): no params data found [ 95.603658][ T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.651307][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.655231][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1706'. [ 95.672353][ T7808] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.689602][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.733346][ T7808] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.766192][ T7775] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.773428][ T7775] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.792928][ T7775] bridge_slave_0: entered allmulticast mode [ 95.799612][ T7775] bridge_slave_0: entered promiscuous mode [ 95.809765][ T7775] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.816913][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.824625][ T7775] bridge_slave_1: entered allmulticast mode [ 95.831332][ T7775] bridge_slave_1: entered promiscuous mode [ 95.858921][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.870212][ T7775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.881555][ T7775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.925349][ T3986] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.936347][ T7775] team0: Port device team_slave_0 added [ 95.945558][ T7775] team0: Port device team_slave_1 added [ 95.954341][ T3986] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.992789][ T3986] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.001803][ T7775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.008790][ T7775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.035345][ T7775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.060028][ T7775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.061152][ T7872] loop4: detected capacity change from 0 to 128 [ 96.067105][ T7775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.099671][ T7775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.164283][ T7872] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.189584][ T7775] hsr_slave_0: entered promiscuous mode [ 96.201609][ T7775] hsr_slave_1: entered promiscuous mode [ 96.210686][ T7872] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.299181][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.310795][ T7775] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 96.340423][ T7775] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 96.362229][ T7775] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 96.381502][ T7775] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 96.422094][ T7775] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.429210][ T7775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.436583][ T7775] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.443731][ T7775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.492493][ T7775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.514622][ T3986] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.526630][ T3986] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.572791][ T7775] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.587367][ T3986] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.594561][ T3986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.605307][ T7914] netlink: 'syz.6.1715': attribute type 1 has an invalid length. [ 96.642097][ T3966] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.649214][ T3966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.683415][ T7914] bond1: (slave geneve2): making interface the new active one [ 96.701426][ T7914] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 96.712116][ T4010] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.726947][ T3946] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.780430][ T3946] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.820721][ T3946] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.873633][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1719'. [ 96.974165][ T7775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.096555][ T7904] chnl_net:caif_netlink_parms(): no params data found [ 97.278606][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.286203][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.333174][ T7904] bridge_slave_0: entered allmulticast mode [ 97.353204][ T7904] bridge_slave_0: entered promiscuous mode [ 97.371657][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.378838][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.407293][ T7904] bridge_slave_1: entered allmulticast mode [ 97.438863][ T7904] bridge_slave_1: entered promiscuous mode [ 97.477371][ T7904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.487479][ T7775] veth0_vlan: entered promiscuous mode [ 97.502920][ T7904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.516274][ T7775] veth1_vlan: entered promiscuous mode [ 97.541962][ T7904] team0: Port device team_slave_0 added [ 97.548994][ T7904] team0: Port device team_slave_1 added [ 97.575326][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.583162][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.609471][ T7904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.624605][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.631604][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.658163][ T7904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.707340][ T7904] hsr_slave_0: entered promiscuous mode [ 97.713720][ T7904] hsr_slave_1: entered promiscuous mode [ 97.719577][ T7904] debugfs: 'hsr0' already exists in 'hsr' [ 97.725566][ T7904] Cannot create hsr debugfs directory [ 97.734688][ T7775] veth0_macvtap: entered promiscuous mode [ 97.769520][ T7775] veth1_macvtap: entered promiscuous mode [ 97.799257][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 97.823388][ T7775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.866489][ T7775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.894301][ T3966] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.930725][ T3966] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.942538][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 97.942553][ T29] audit: type=1400 audit(1759367620.281:2363): avc: denied { mounton } for pid=7775 comm="syz-executor" path="/root/syzkaller.vnp7au/syz-tmp" dev="sda1" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 97.958154][ T7904] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 97.973176][ T29] audit: type=1400 audit(1759367620.281:2364): avc: denied { mount } for pid=7775 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.012644][ T7904] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 98.030636][ T4010] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.044277][ T29] audit: type=1400 audit(1759367620.341:2365): avc: denied { mount } for pid=7775 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 98.066415][ T29] audit: type=1400 audit(1759367620.341:2366): avc: denied { mounton } for pid=7775 comm="syz-executor" path="/root/syzkaller.vnp7au/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 98.093330][ T29] audit: type=1400 audit(1759367620.341:2367): avc: denied { mounton } for pid=7775 comm="syz-executor" path="/root/syzkaller.vnp7au/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 98.121010][ T29] audit: type=1400 audit(1759367620.351:2368): avc: denied { mounton } for pid=7775 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 98.144317][ T29] audit: type=1400 audit(1759367620.351:2369): avc: denied { mount } for pid=7775 comm="syz-executor" name="/" dev="gadgetfs" ino=4676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 98.166865][ T29] audit: type=1400 audit(1759367620.381:2370): avc: denied { add_name } for pid=7775 comm="syz-executor" name="syz7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 98.191663][ T29] audit: type=1400 audit(1759367620.381:2371): avc: denied { create } for pid=7775 comm="syz-executor" name="syz7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 98.212230][ T29] audit: type=1400 audit(1759367620.381:2372): avc: denied { associate } for pid=7775 comm="syz-executor" name="syz7" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 98.263720][ T7904] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 98.352137][ T7904] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 98.375782][ T4010] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.556462][ T7904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.586818][ T7904] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.657650][ T3988] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.664812][ T3988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.674305][ T3988] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.681471][ T3988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.699399][ T7904] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.710179][ T7904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.855171][ T7904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.970007][ T8016] Set syz1 is full, maxelem 65536 reached [ 99.140439][ T8061] tipc: Started in network mode [ 99.145491][ T8061] tipc: Node identity ac14140f, cluster identity 4711 [ 99.155580][ T8061] tipc: New replicast peer: 255.255.255.255 [ 99.161759][ T8061] tipc: Enabled bearer , priority 10 [ 99.178304][ T7904] veth0_vlan: entered promiscuous mode [ 99.210491][ T7904] veth1_vlan: entered promiscuous mode [ 99.246340][ T7904] veth0_macvtap: entered promiscuous mode [ 99.256699][ T7904] veth1_macvtap: entered promiscuous mode [ 99.272624][ T7904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.286224][ T7904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.297668][ T4010] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.339258][ T4010] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.368201][ T4010] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.388013][ T4010] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.464751][ T8094] netlink: 'syz.2.1760': attribute type 4 has an invalid length. [ 99.595675][ T8107] 9pnet: Could not find request transport: 0xffffffffffffffff [ 99.733957][ T8130] netlink: 'syz.8.1777': attribute type 21 has an invalid length. [ 99.765131][ T8130] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1777'. [ 99.774305][ T8130] netlink: 'syz.8.1777': attribute type 1 has an invalid length. [ 100.128872][ T8161] loop5: detected capacity change from 0 to 1024 [ 100.204664][ T8161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.266856][ T8161] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 100.280993][ T3394] tipc: Node number set to 2886997007 [ 100.373207][ T6475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.678910][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1809'. [ 100.697210][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1811'. [ 100.779365][ T8217] 9pnet: p9_errstr2errno: server reported unknown error 1c s0(z@AbB6L3W2M(.Gwk"6( [ 100.830795][ T8221] sd 0:0:1:0: device reset [ 100.984875][ T8239] loop5: detected capacity change from 0 to 128 [ 101.018552][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1825'. [ 101.132260][ T8252] 9pnet: Could not find request transport: 0xffffffffffffffff [ 101.193619][ T8257] netlink: 19 bytes leftover after parsing attributes in process `syz.6.1830'. [ 101.354395][ T8283] macvtap0: refused to change device tx_queue_len [ 101.412212][ T8291] loop2: detected capacity change from 0 to 512 [ 101.423916][ T8294] loop5: detected capacity change from 0 to 736 [ 101.445938][ T8291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.471540][ T8291] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.511271][ T8294] Symlink component flag not implemented [ 101.541107][ T8294] Symlink component flag not implemented (122) [ 101.554922][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.663708][ T8314] wireguard0: entered promiscuous mode [ 101.669339][ T8314] wireguard0: entered allmulticast mode [ 102.563210][ T8398] netlink: 'syz.6.1897': attribute type 2 has an invalid length. [ 102.750182][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1905'. [ 102.761989][ T8417] netlink: 312 bytes leftover after parsing attributes in process `syz.6.1905'. [ 102.771552][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1905'. [ 102.850459][ T8425] sd 0:0:1:0: device reset [ 102.920758][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1912'. [ 102.952650][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 102.952708][ T29] audit: type=1326 audit(1759367625.291:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8434 comm="syz.6.1913" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58615beec9 code=0x0 [ 103.038606][ T29] audit: type=1326 audit(1759367625.371:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 103.070848][ T29] audit: type=1326 audit(1759367625.381:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 103.094426][ T29] audit: type=1326 audit(1759367625.381:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 103.117825][ T29] audit: type=1326 audit(1759367625.381:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 103.141864][ T29] audit: type=1326 audit(1759367625.381:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 103.165432][ T29] audit: type=1326 audit(1759367625.381:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 103.189124][ T29] audit: type=1326 audit(1759367625.401:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 103.215363][ T29] audit: type=1326 audit(1759367625.481:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.5.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 103.238972][ T29] audit: type=1326 audit(1759367625.481:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.5.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 103.240698][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1917'. [ 103.285094][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.348771][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.401229][ T8465] sd 0:0:1:0: device reset [ 103.414468][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.450263][ T8472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1925'. [ 103.515947][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.603737][ T12] bridge_slave_1: left allmulticast mode [ 103.609484][ T12] bridge_slave_1: left promiscuous mode [ 103.615233][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.671955][ T12] bridge_slave_0: left allmulticast mode [ 103.677843][ T12] bridge_slave_0: left promiscuous mode [ 103.683796][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.864150][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.877733][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.888667][ T12] bond0 (unregistering): Released all slaves [ 103.898077][ T12] bond1 (unregistering): Released all slaves [ 103.906649][ T8515] vhci_hcd: invalid port number 61 [ 103.914208][ T12] bond2 (unregistering): (slave macvlan0): Releasing active interface [ 103.925706][ T12] bond2 (unregistering): Released all slaves [ 103.953201][ T8519] wireguard0: entered promiscuous mode [ 103.958799][ T8519] wireguard0: entered allmulticast mode [ 103.965536][ T8524] SELinux: policydb version 65545 does not match my version range 15-35 [ 103.976842][ T8524] SELinux: failed to load policy [ 103.996479][ T12] tipc: Disabling bearer [ 104.001877][ T12] tipc: Disabling bearer [ 104.006821][ T12] tipc: Disabling bearer [ 104.011888][ T12] tipc: Left network mode [ 104.044153][ T12] hsr_slave_0: left promiscuous mode [ 104.057627][ T12] hsr_slave_1: left promiscuous mode [ 104.073909][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.081564][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.120492][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.128201][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.154876][ T12] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 104.162170][ T12] batman_adv: batadv0: Removing interface: veth1_vlan [ 104.182844][ T12] veth1_macvtap: left promiscuous mode [ 104.195960][ T12] veth0_macvtap: left promiscuous mode [ 104.220392][ T12] veth1_vlan: left promiscuous mode [ 104.248173][ T12] veth0_vlan: left promiscuous mode [ 104.397297][ T8555] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 104.660689][ T8598] vhci_hcd: invalid port number 61 [ 105.226435][ T8658] pim6reg1: entered promiscuous mode [ 105.231876][ T8658] pim6reg1: entered allmulticast mode [ 105.281905][ T8664] wireguard0: entered promiscuous mode [ 105.287419][ T8664] wireguard0: entered allmulticast mode [ 105.512283][ T8685] pim6reg: entered allmulticast mode [ 105.530510][ T8685] pim6reg: left allmulticast mode [ 105.902193][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 105.956962][ T8738] wireguard0: entered promiscuous mode [ 105.962620][ T8738] wireguard0: entered allmulticast mode [ 106.068941][ T8753] __nla_validate_parse: 5 callbacks suppressed [ 106.068956][ T8753] netlink: 4436 bytes leftover after parsing attributes in process `syz.5.2025'. [ 106.101224][ T8753] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 106.197425][ T8769] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2033'. [ 106.206692][ T8769] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2033'. [ 106.218399][ T8769] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2033'. [ 106.227744][ T8769] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2033'. [ 106.237561][ T8769] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2033'. [ 106.457266][ T8795] wireguard0: entered promiscuous mode [ 106.463212][ T8795] wireguard0: entered allmulticast mode [ 106.513692][ T8805] loop5: detected capacity change from 0 to 1024 [ 106.523707][ T8805] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.540811][ T8805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.573836][ T8815] loop7: detected capacity change from 0 to 1024 [ 106.581801][ T8815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.604217][ T8815] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 106.616822][ T8819] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=8819 comm=syz.8.2053 [ 106.630893][ T8815] System zones: 0-1, 3-12 [ 106.636272][ T8815] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.661890][ T8815] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2052: bg 0: block 88: padding at end of block bitmap is not set [ 106.683232][ T6475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.710075][ T7775] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.861598][ T8842] SELinux: policydb version 65545 does not match my version range 15-35 [ 106.892741][ T8842] SELinux: failed to load policy [ 106.941554][ T8853] wireguard0: entered promiscuous mode [ 106.947318][ T8853] wireguard0: entered allmulticast mode [ 107.084157][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2071'. [ 107.121885][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2072'. [ 107.141302][ T8864] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2071'. [ 107.168393][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2074'. [ 107.243718][ T8877] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 107.257709][ T8876] IPVS: stopping backup sync thread 8877 ... [ 107.321500][ T8886] SELinux: policydb version 65545 does not match my version range 15-35 [ 107.342692][ T8886] SELinux: failed to load policy [ 107.471970][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.490003][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.507004][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.523261][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.579184][ T8914] loop6: detected capacity change from 0 to 512 [ 107.590755][ T8914] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.618634][ T8917] loop8: detected capacity change from 0 to 128 [ 107.648514][ T8917] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.690076][ T8917] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.766066][ T12] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.057352][ T8948] netlink: 'syz.6.2107': attribute type 4 has an invalid length. [ 108.107795][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 108.107809][ T29] audit: type=1326 audit(1759367630.441:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.5.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 108.137558][ T29] audit: type=1326 audit(1759367630.441:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.5.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 108.221077][ T29] audit: type=1326 audit(1759367630.501:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.5.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 108.244509][ T29] audit: type=1326 audit(1759367630.501:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.5.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 108.268043][ T29] audit: type=1326 audit(1759367630.501:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.5.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 108.291679][ T29] audit: type=1326 audit(1759367630.501:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.5.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 108.315181][ T29] audit: type=1326 audit(1759367630.501:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.5.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 108.338610][ T29] audit: type=1326 audit(1759367630.501:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.5.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 108.362433][ T29] audit: type=1326 audit(1759367630.501:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.5.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 108.386085][ T29] audit: type=1326 audit(1759367630.501:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.5.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 108.497106][ T8980] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 108.665196][ T8931] Set syz1 is full, maxelem 65536 reached [ 108.813321][ T9016] netlink: 'syz.8.2130': attribute type 1 has an invalid length. [ 108.888010][ T9026] loop2: detected capacity change from 0 to 1024 [ 108.905157][ T9026] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.928995][ T9029] syzkaller1: entered promiscuous mode [ 108.934808][ T9029] syzkaller1: entered allmulticast mode [ 108.968942][ T9026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.029342][ T9042] loop5: detected capacity change from 0 to 512 [ 109.057211][ T9042] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.2137: error while reading EA inode 32 err=-116 [ 109.084765][ T9042] EXT4-fs (loop5): Remounting filesystem read-only [ 109.085284][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.093224][ T9042] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 109.101094][ T9052] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 109.113461][ T9042] EXT4-fs (loop5): 1 orphan inode deleted [ 109.138429][ T9054] netlink: 'syz.6.2140': attribute type 13 has an invalid length. [ 109.138559][ T9042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.146480][ T9054] netlink: 'syz.6.2140': attribute type 17 has an invalid length. [ 109.170744][ T9042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.200789][ T9050] IPVS: stopping backup sync thread 9052 ... [ 109.289117][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.326153][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.393321][ T9079] capability: warning: `syz.5.2148' uses deprecated v2 capabilities in a way that may be insecure [ 109.412905][ T9054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.432613][ T9083] loop2: detected capacity change from 0 to 128 [ 109.439583][ T9083] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.454566][ T9083] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.477945][ T3966] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.608497][ T9100] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 109.684182][ T9098] IPVS: stopping backup sync thread 9100 ... [ 109.744659][ T9119] loop6: detected capacity change from 0 to 1024 [ 109.782819][ T9119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.895075][ T9119] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2164: Allocating blocks 449-513 which overlap fs metadata [ 109.944934][ T9115] EXT4-fs (loop6): pa ffff888109c30460: logic 48, phys. 177, len 21 [ 109.953103][ T9115] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 110.032689][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.173648][ T1036] hid_parser_main: 48 callbacks suppressed [ 110.173665][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.187337][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.195011][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.247139][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.254759][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.262228][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.269685][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.277116][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.284548][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.291971][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.364175][ T1036] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 110.432157][ T9151] loop6: detected capacity change from 0 to 1024 [ 110.441261][ T9151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.459382][ T9151] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 110.459520][ T9146] fido_id[9146]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 110.467772][ T9151] System zones: 0-1, 3-12 [ 110.490856][ T9151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.525546][ T9151] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2177: bg 0: block 88: padding at end of block bitmap is not set [ 110.569689][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.647425][ T9172] loop6: detected capacity change from 0 to 1024 [ 110.693101][ T9172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.781998][ T9172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.860657][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.896649][ T9187] netlink: 'syz.7.2186': attribute type 4 has an invalid length. [ 110.998439][ T9196] rdma_op ffff88811996f580 conn xmit_rdma 0000000000000000 [ 111.201807][ T9217] loop7: detected capacity change from 0 to 512 [ 111.219455][ T9217] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.265125][ T9217] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 111.273416][ T9217] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 111.298796][ T9228] __nla_validate_parse: 17 callbacks suppressed [ 111.298814][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2202'. [ 111.301948][ T9217] System zones: 0-1, 15-15, 18-18, 34-34 [ 111.336715][ T9217] EXT4-fs (loop7): orphan cleanup on readonly fs [ 111.351607][ T9217] EXT4-fs warning (device loop7): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 111.366286][ T9217] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 111.404722][ T9217] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2193: bg 0: block 40: padding at end of block bitmap is not set [ 111.435345][ T9217] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 111.515982][ T9217] EXT4-fs (loop7): 1 truncate cleaned up [ 111.527586][ T9217] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.951565][ T7775] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.588128][ T9320] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 112.588128][ T9320] program syz.7.2239 not setting count and/or reply_len properly [ 112.743324][ T9330] loop7: detected capacity change from 0 to 512 [ 112.789749][ T9329] netlink: 'syz.8.2243': attribute type 10 has an invalid length. [ 112.798570][ T9329] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2243'. [ 112.811495][ T9330] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.2241: error while reading EA inode 32 err=-116 [ 112.832103][ T9330] EXT4-fs (loop7): Remounting filesystem read-only [ 112.839408][ T9330] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 112.850590][ T9330] EXT4-fs (loop7): 1 orphan inode deleted [ 112.857512][ T9330] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.871154][ T9329] team0: entered promiscuous mode [ 112.876947][ T9329] team_slave_0: entered promiscuous mode [ 112.886747][ T9329] team_slave_1: entered promiscuous mode [ 112.895706][ T9329] team0: entered allmulticast mode [ 112.902907][ T9215] loop2: detected capacity change from 0 to 32768 [ 112.911445][ T9329] team_slave_0: entered allmulticast mode [ 112.919957][ T9329] team_slave_1: entered allmulticast mode [ 112.931240][ T9330] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.985347][ T9329] bridge0: port 3(team0) entered blocking state [ 112.993634][ T9329] bridge0: port 3(team0) entered disabled state [ 112.999092][ T9338] netlink: 'syz.5.2246': attribute type 39 has an invalid length. [ 113.031267][ T3296] loop2: p1 p3 < > [ 113.052445][ T9329] bridge0: port 3(team0) entered blocking state [ 113.062557][ T9329] bridge0: port 3(team0) entered forwarding state [ 113.067893][ T9215] loop2: p1 p3 < > [ 113.137026][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 113.137091][ T29] audit: type=1400 audit(1759367635.471:2811): avc: denied { mounton } for pid=9339 comm="syz.8.2247" path="/proc/261/task" dev="proc" ino=25196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 113.214408][ T9212] syz.2.2195 (9212) used greatest stack depth: 7288 bytes left [ 113.378492][ T9352] netlink: 'syz.7.2252': attribute type 13 has an invalid length. [ 113.386505][ T9352] netlink: 'syz.7.2252': attribute type 17 has an invalid length. [ 113.424638][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 113.439627][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 113.479236][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 113.491676][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 113.571998][ T9216] Set syz1 is full, maxelem 65536 reached [ 113.656582][ T9352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.678079][ T9358] vlan2: entered allmulticast mode [ 113.700200][ T29] audit: type=1326 audit(1759367636.031:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe153eeec9 code=0x7ffc0000 [ 113.724179][ T29] audit: type=1326 audit(1759367636.031:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe153eeec9 code=0x7ffc0000 [ 113.755837][ T29] audit: type=1326 audit(1759367636.031:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe153eeec9 code=0x7ffc0000 [ 113.780124][ T29] audit: type=1326 audit(1759367636.031:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe153eeec9 code=0x7ffc0000 [ 113.803791][ T29] audit: type=1326 audit(1759367636.031:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe153eeec9 code=0x7ffc0000 [ 113.827513][ T29] audit: type=1326 audit(1759367636.031:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe153eeec9 code=0x7ffc0000 [ 113.851265][ T29] audit: type=1326 audit(1759367636.091:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe153eeec9 code=0x7ffc0000 [ 113.875112][ T29] audit: type=1326 audit(1759367636.091:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe153eeec9 code=0x7ffc0000 [ 113.899787][ T29] audit: type=1326 audit(1759367636.091:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7efe153eeec9 code=0x7ffc0000 [ 114.000751][ T9373] loop6: detected capacity change from 0 to 512 [ 114.023281][ T9373] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.2258: error while reading EA inode 32 err=-116 [ 114.058665][ T9373] EXT4-fs (loop6): Remounting filesystem read-only [ 114.078302][ T9373] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 114.094686][ T9373] EXT4-fs (loop6): 1 orphan inode deleted [ 114.117781][ T9373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.131299][ T9373] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.203436][ T9390] loop5: detected capacity change from 0 to 1024 [ 114.214299][ T9390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.260140][ T9390] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2266: Allocating blocks 449-513 which overlap fs metadata [ 114.280803][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2268'. [ 114.290229][ T9388] EXT4-fs (loop5): pa ffff888109c304d0: logic 48, phys. 177, len 21 [ 114.298368][ T9388] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 114.324512][ T6475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.981314][ T9417] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9417 comm=syz.7.2287 [ 114.993858][ T9417] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9417 comm=syz.7.2287 [ 115.040520][ T9424] loop8: detected capacity change from 0 to 512 [ 115.053711][ T9424] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.2276: error while reading EA inode 32 err=-116 [ 115.072433][ T9424] EXT4-fs (loop8): Remounting filesystem read-only [ 115.079165][ T9424] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 115.090199][ T9424] EXT4-fs (loop8): 1 orphan inode deleted [ 115.099839][ T9424] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.113762][ T9424] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.234175][ T9437] loop5: detected capacity change from 0 to 256 [ 115.247838][ T9433] loop8: detected capacity change from 0 to 8192 [ 115.262488][ T9437] FAT-fs (loop5): Directory bread(block 64) failed [ 115.271070][ T9437] FAT-fs (loop5): Directory bread(block 65) failed [ 115.278871][ T9437] FAT-fs (loop5): Directory bread(block 66) failed [ 115.285733][ T9437] FAT-fs (loop5): Directory bread(block 67) failed [ 115.303225][ T9437] FAT-fs (loop5): Directory bread(block 68) failed [ 115.310458][ T9437] FAT-fs (loop5): Directory bread(block 69) failed [ 115.317332][ T9437] FAT-fs (loop5): Directory bread(block 70) failed [ 115.324085][ T9437] FAT-fs (loop5): Directory bread(block 71) failed [ 115.330689][ T9437] FAT-fs (loop5): Directory bread(block 72) failed [ 115.337899][ T9437] FAT-fs (loop5): Directory bread(block 73) failed [ 116.156296][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2309'. [ 116.165365][ T9501] netem: change failed [ 116.582929][ T9517] vlan2: entered allmulticast mode [ 116.964858][ T9567] loop2: detected capacity change from 0 to 512 [ 116.998861][ T9567] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.2311: error while reading EA inode 32 err=-116 [ 117.019040][ T9567] EXT4-fs (loop2): Remounting filesystem read-only [ 117.026291][ T9567] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 117.036548][ T9567] EXT4-fs (loop2): 1 orphan inode deleted [ 117.047019][ T9567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.061983][ T9567] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.225999][ T9592] vlan2: entered allmulticast mode [ 117.830075][ T9628] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2344'. [ 117.952818][ T9636] netlink: 'syz.7.2347': attribute type 10 has an invalid length. [ 117.978126][ T9636] team0: Port device dummy0 added [ 117.988254][ T9636] netlink: 'syz.7.2347': attribute type 10 has an invalid length. [ 118.009447][ T9636] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 118.025686][ T9642] loop6: detected capacity change from 0 to 1024 [ 118.032801][ T9642] EXT4-fs: Ignoring removed nobh option [ 118.040439][ T9636] team0: Failed to send options change via netlink (err -105) [ 118.048432][ T9636] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 118.057464][ T9642] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.069492][ T9636] team0: Port device dummy0 removed [ 118.076434][ T9642] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.2350: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 118.077310][ T9636] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 118.115640][ T9642] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2350: couldn't read orphan inode 11 (err -117) [ 118.130422][ T9642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.159004][ T9642] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2350: Invalid block bitmap block 0 in block_group 0 [ 118.192662][ T9642] __quota_error: 347 callbacks suppressed [ 118.192678][ T9642] Quota error (device loop6): write_blk: dquota write failed [ 118.206097][ T9642] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 118.248557][ T9642] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.2350: Failed to acquire dquot type 0 [ 118.299992][ T3988] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm kworker/u8:45: Invalid inode table block 18446744065119617025 in block_group 0 [ 118.325663][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.489626][ T9666] loop5: detected capacity change from 0 to 2048 [ 118.506889][ T29] audit: type=1400 audit(1759367640.841:3168): avc: denied { create } for pid=9669 comm="syz.6.2359" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 118.527689][ T29] audit: type=1400 audit(1759367640.841:3169): avc: denied { write } for pid=9669 comm="syz.6.2359" name="file0" dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 118.550283][ T29] audit: type=1400 audit(1759367640.841:3170): avc: denied { open } for pid=9669 comm="syz.6.2359" path="/211/file0" dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 118.550430][ T9652] loop8: detected capacity change from 0 to 32768 [ 118.573680][ T29] audit: type=1400 audit(1759367640.841:3171): avc: denied { ioctl } for pid=9669 comm="syz.6.2359" path="/211/file0" dev="tmpfs" ino=1105 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 118.652144][ T9666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.693990][ T9666] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.707811][ T3568] loop8: p1 p3 < > [ 118.734641][ T9652] loop8: p1 p3 < > [ 118.740818][ T9677] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2361'. [ 118.764605][ T29] audit: type=1400 audit(1759367641.101:3172): avc: denied { unlink } for pid=6611 comm="syz-executor" name="file0" dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 118.811863][ T9677] netem: change failed [ 118.823596][ T6475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.902224][ T29] audit: type=1400 audit(1759367641.131:3173): avc: denied { append } for pid=9664 comm="syz.5.2356" path="/279/file0/file0/cgroup.controllers" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.926923][ T29] audit: type=1326 audit(1759367641.221:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9685 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 118.951032][ T29] audit: type=1326 audit(1759367641.221:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9685 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 119.194792][ T9648] syz.8.2351 (9648) used greatest stack depth: 6328 bytes left [ 119.327958][ T9700] loop8: detected capacity change from 0 to 128 [ 119.336956][ T9700] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 119.616956][ T9725] loop8: detected capacity change from 0 to 512 [ 119.635122][ T9725] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.2382: error while reading EA inode 32 err=-116 [ 119.667956][ T9725] EXT4-fs (loop8): Remounting filesystem read-only [ 119.675894][ T9725] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 119.687306][ T9725] EXT4-fs (loop8): 1 orphan inode deleted [ 119.694272][ T9725] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.725925][ T7904] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.314962][ T9768] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9768 comm=syz.6.2399 [ 120.327903][ T9768] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9768 comm=syz.6.2399 [ 120.534361][ T9] IPVS: starting estimator thread 0... [ 120.693522][ T4010] IPVS: stop unused estimator thread 0... [ 120.718546][ T9791] syzkaller1: entered promiscuous mode [ 120.724078][ T9791] syzkaller1: entered allmulticast mode [ 120.802781][ T9801] nfs4: Bad value for 'source' [ 121.081771][ T9821] netlink: 'syz.6.2432': attribute type 1 has an invalid length. [ 121.127493][ T9825] netlink: 'syz.5.2424': attribute type 16 has an invalid length. [ 121.135435][ T9825] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2424'. [ 122.076119][ T9869] loop8: detected capacity change from 0 to 1024 [ 122.713655][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2455'. [ 122.975004][ T9918] loop7: detected capacity change from 0 to 4096 [ 122.982124][ T9922] pim6reg1: entered promiscuous mode [ 122.984371][ T9918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.987464][ T9922] pim6reg1: entered allmulticast mode [ 123.028014][ T9918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.067759][ T9918] Invalid ELF header magic: != ELF [ 123.094105][ T7775] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.179712][ T9952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9952 comm=syz.7.2468 [ 123.194557][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2468'. [ 123.425174][ T9989] loop2: detected capacity change from 0 to 128 [ 124.041353][T10093] loop2: detected capacity change from 0 to 1024 [ 124.050113][T10093] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.071740][T10093] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.2492: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.086203][T10093] __quota_error: 346 callbacks suppressed [ 124.086218][T10093] Quota error (device loop2): write_blk: dquota write failed [ 124.099466][T10093] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 124.109735][T10093] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.2492: Failed to acquire dquot type 0 [ 124.122118][T10093] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2492: Freeing blocks not in datazone - block = 0, count = 4096 [ 124.135900][T10093] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2492: Invalid inode bitmap blk 0 in block_group 0 [ 124.148872][T10093] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 124.157557][ T3962] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.162482][T10093] EXT4-fs (loop2): 1 orphan inode deleted [ 124.178299][T10093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.192452][ T3962] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 124.201008][ T3962] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:21: Failed to release dquot type 0 [ 124.221064][T10093] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 124.248779][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.303199][T10119] loop5: detected capacity change from 0 to 128 [ 124.314730][ T29] audit: type=1400 audit(1759367646.651:3522): avc: denied { remount } for pid=10117 comm="syz.2.2496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.378801][T10123] $H: renamed from bond0 (while UP) [ 124.386563][T10123] $H: entered promiscuous mode [ 124.425974][T10126] sd 0:0:1:0: device reset [ 124.469978][T10128] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2498'. [ 124.537571][T10128] batadv1: entered promiscuous mode [ 124.543070][T10128] batadv1: entered allmulticast mode [ 124.592401][ T29] audit: type=1400 audit(1759367646.931:3523): avc: denied { map } for pid=10133 comm="syz.5.2502" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.593659][T10134] vhci_hcd: invalid port number 96 [ 124.621866][T10134] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 124.761644][ T29] audit: type=1400 audit(1759367647.101:3524): avc: denied { append } for pid=10144 comm="syz.6.2507" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.819085][T10151] smc: net device bond0 applied user defined pnetid SYZ0 [ 124.841606][T10151] smc: net device bond0 erased user defined pnetid SYZ0 [ 125.291566][ T29] audit: type=1326 audit(1759367647.631:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.5.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 125.335322][T10180] netlink: 288 bytes leftover after parsing attributes in process `syz.6.2520'. [ 125.374764][ T29] audit: type=1326 audit(1759367647.631:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.5.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 125.398391][ T29] audit: type=1326 audit(1759367647.651:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.5.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 125.422409][ T29] audit: type=1326 audit(1759367647.651:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.5.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f0dbeec9 code=0x7ffc0000 [ 125.974820][T10274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10274 comm=syz.5.2547 [ 126.033502][T10274] netlink: 'syz.5.2547': attribute type 1 has an invalid length. [ 126.097040][T10274] bond1: (slave bridge1): making interface the new active one [ 126.106782][T10274] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 126.172740][T10304] loop2: detected capacity change from 0 to 512 [ 126.206151][T10304] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 126.218422][T10304] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 126.228191][T10304] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.2556: corrupted in-inode xattr: e_value size too large [ 126.242657][T10304] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2556: couldn't read orphan inode 15 (err -117) [ 126.273219][T10304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.398675][T10333] 9p: Unknown Cache mode or invalid value fL [ 126.416289][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.578064][T10357] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.587944][T10357] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 126.734330][T10357] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.744162][T10357] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 126.793380][T10357] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.803303][T10357] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 126.829013][T10399] rdma_op ffff888147566d80 conn xmit_rdma 0000000000000000 [ 126.873392][T10357] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.883383][T10357] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 126.949762][ T3970] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 126.958130][ T3970] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 126.977641][ T3970] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 126.986114][ T3970] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 126.995412][ T3970] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.003731][ T3970] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.014517][ T3970] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.023122][ T3970] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.131246][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2580'. [ 127.145852][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2580'. [ 127.157533][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2580'. [ 127.167222][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2580'. [ 127.211719][T10440] loop5: detected capacity change from 0 to 1024 [ 127.221025][T10440] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 127.326502][T10438] loop6: detected capacity change from 0 to 512 [ 127.333504][T10438] msdos: Bad value for 'errors' [ 127.728680][T10485] netlink: 87 bytes leftover after parsing attributes in process `syz.6.2597'. [ 127.834756][T10501] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 127.898707][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2604'. [ 127.926229][T10515] loop6: detected capacity change from 0 to 512 [ 127.947544][T10515] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.975821][T10515] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 127.989819][T10515] EXT4-fs (loop6): 1 truncate cleaned up [ 128.008085][T10515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.214732][T10536] ================================================================== [ 128.222859][T10536] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 128.231124][T10536] [ 128.233449][T10536] write to 0xffff888120ce29a4 of 4 bytes by task 10515 on cpu 1: [ 128.241163][T10536] xas_set_mark+0x12b/0x140 [ 128.245693][T10536] tag_pages_for_writeback+0xc2/0x290 [ 128.251072][T10536] ext4_do_writepages+0x6b2/0x2750 [ 128.256192][T10536] ext4_writepages+0x176/0x300 [ 128.260972][T10536] do_writepages+0x1c6/0x310 [ 128.265647][T10536] file_write_and_wait_range+0x156/0x2c0 [ 128.271281][T10536] generic_buffers_fsync_noflush+0x45/0x120 [ 128.277191][T10536] ext4_sync_file+0x1ab/0x690 [ 128.281877][T10536] vfs_fsync_range+0x10d/0x130 [ 128.286657][T10536] ext4_buffered_write_iter+0x34f/0x3c0 [ 128.292208][T10536] ext4_file_write_iter+0xdbf/0xf00 [ 128.297414][T10536] iter_file_splice_write+0x663/0xa60 [ 128.302794][T10536] direct_splice_actor+0x153/0x2a0 [ 128.307928][T10536] splice_direct_to_actor+0x30f/0x680 [ 128.313312][T10536] do_splice_direct+0xda/0x150 [ 128.318086][T10536] do_sendfile+0x380/0x650 [ 128.322510][T10536] __x64_sys_sendfile64+0x105/0x150 [ 128.327786][T10536] x64_sys_call+0x2bb4/0x3000 [ 128.332479][T10536] do_syscall_64+0xd2/0x200 [ 128.337007][T10536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.343080][T10536] [ 128.345406][T10536] read to 0xffff888120ce29a4 of 4 bytes by task 10536 on cpu 0: [ 128.353035][T10536] filemap_write_and_wait_range+0xfc/0x340 [ 128.358859][T10536] ext4_file_write_iter+0xe04/0xf00 [ 128.364068][T10536] iter_file_splice_write+0x663/0xa60 [ 128.369457][T10536] direct_splice_actor+0x153/0x2a0 [ 128.374590][T10536] splice_direct_to_actor+0x30f/0x680 [ 128.379978][T10536] do_splice_direct+0xda/0x150 [ 128.384764][T10536] do_sendfile+0x380/0x650 [ 128.389195][T10536] __x64_sys_sendfile64+0x105/0x150 [ 128.394412][T10536] x64_sys_call+0x2bb4/0x3000 [ 128.399094][T10536] do_syscall_64+0xd2/0x200 [ 128.403638][T10536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.409532][T10536] [ 128.411861][T10536] value changed: 0x02000021 -> 0x04000021 [ 128.417651][T10536] [ 128.419965][T10536] Reported by Kernel Concurrency Sanitizer on: [ 128.426127][T10536] CPU: 0 UID: 0 PID: 10536 Comm: syz.6.2605 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.435939][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.446178][T10536] ================================================================== [ 128.833569][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.